Bypassing Application Whitelisting with runscripthelper.exe
Introduction
While running through one of the labs for our PowerShell course, I stumbled upon a Microsoft-signed PowerShell host process in System32 — runscripthelper.exe. This program was just…